
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: cJM2Tucz542WcBuAlGUzq8/DKGMl5Onb7EzukpuXz5A=
Subject key identifier: 4A:00:B0:C5:50:57:9B:B5:F2:50:23:B5:9E:D3:BA:B4:95:79:8B:5C
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 019FA9ABDB7D70D6FF6183D5ECEC6D830B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 05C4
Signing time: Tue 28 Jul 2026 17:00:40 +0000
Manifest this update: Tue 28 Jul 2026 17:00:40 +0000
Manifest next update: Wed 29 Jul 2026 17:00:40 +0000
Files and hashes: 1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: /6LzUDPPBQmlIZfd4Fg/zkNY3fHGuYybX/CVoq3njnQ=)
3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:db:7d:70:d6:ff:61:83:d5:ec:ec:6d:83:0b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Jul 28 17:00:40 2026 GMT
Not After : Jul 29 17:00:40 2026 GMT
Subject: CN=4a00b0c550579bb5f25023b59ed3bab495798b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:62:74:ec:24:26:56:25:34:d6:50:ce:c6:
d1:ee:2f:8d:9a:3c:0a:54:30:f5:af:40:ae:40:02:
28:21:09:63:63:1c:4a:f1:62:8b:e7:2e:ac:0e:1d:
d0:da:b3:c0:ff:97:b0:fa:a8:a0:63:f1:cf:92:d0:
11:20:44:28:30:f0:71:bd:cf:80:62:76:ee:3f:69:
29:15:4e:32:28:a5:86:35:f4:e7:19:41:f1:5f:3d:
b2:1f:73:d1:14:90:cf:a8:38:b5:38:b6:34:9e:9b:
dc:2f:85:0b:ba:23:39:57:e7:b6:6c:08:23:8d:30:
7e:a3:00:fd:99:4f:e3:5d:ae:ba:a3:12:86:66:ec:
59:47:5a:17:f6:35:be:d1:25:3d:58:ec:d6:dc:d5:
87:b8:ea:47:65:47:e8:74:c6:70:13:19:53:0f:cd:
0d:34:dc:db:85:fc:44:53:19:0b:f8:6a:32:69:8a:
16:16:d9:23:c8:d5:5e:cc:88:1e:da:a8:05:5b:42:
54:d6:1f:03:82:2e:b3:0f:46:0b:f9:56:d6:aa:83:
09:46:37:ff:22:95:a0:2a:36:19:06:53:00:68:e6:
4b:bd:5f:4a:11:be:74:84:fb:c3:64:8c:9c:04:6c:
b5:96:fc:c6:3e:5b:24:11:8b:86:3e:06:c1:4e:c2:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:B0:C5:50:57:9B:B5:F2:50:23:B5:9E:D3:BA:B4:95:79:8B:5C
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ae:4c:b5:1b:ab:92:b9:1a:b6:52:73:4c:f5:85:20:ad:22:
9a:ec:cb:18:21:df:ea:ac:b0:94:81:0d:05:e8:a6:4a:3e:25:
28:e0:d1:a7:31:4d:f7:4b:02:56:e2:ca:e0:4f:e3:60:77:1f:
ee:0e:0d:c3:23:2e:85:ba:fa:47:9e:70:85:f5:4e:25:b6:9f:
46:50:15:ba:fb:f4:44:e4:a4:2f:32:ce:f7:e2:c3:06:06:d2:
90:98:16:5c:34:ac:88:4d:80:da:2b:8b:98:f4:0b:9e:af:75:
f5:b2:fe:29:e2:c7:03:43:73:9d:03:5a:c2:0b:d8:14:b3:54:
47:ae:a0:bb:b5:62:03:9f:0e:2e:e0:20:56:92:02:01:76:23:
8c:cc:bd:d2:e3:ab:21:c7:01:6d:4f:2c:5e:4f:57:46:1a:ec:
f8:4e:3f:99:5f:8b:a2:a2:03:e5:24:d7:f9:3f:21:a6:48:6e:
d4:e8:0b:6e:29:26:29:f3:66:5f:7d:a2:7b:f8:62:49:1c:07:
b7:4d:02:33:5c:9b:33:d5:2f:68:4f:42:64:d5:d9:0d:c0:02:
3f:ce:05:50:d4:67:5b:06:3b:3a:d3:36:52:69:de:3d:2f:dd:
f0:f7:3f:84:91:9b:16:13:bb:3e:3d:0b:b5:bd:12:8e:8d:27:
75:f2:a3:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq9t9cNb/YYPV7OxtgwtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1
YWM5MzAwHhcNMjYwNzI4MTcwMDQwWhcNMjYwNzI5MTcwMDQwWjAzMTEwLwYDVQQD
Eyg0YTAwYjBjNTUwNTc5YmI1ZjI1MDIzYjU5ZWQzYmFiNDk1Nzk4YjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCxidOwkJlYlNNZQzsbR7i+NmjwK
VDD1r0CuQAIoIQljYxxK8WKL5y6sDh3Q2rPA/5ew+qigY/HPktARIEQoMPBxvc+A
YnbuP2kpFU4yKKWGNfTnGUHxXz2yH3PRFJDPqDi1OLY0npvcL4ULuiM5V+e2bAgj
jTB+owD9mU/jXa66oxKGZuxZR1oX9jW+0SU9WOzW3NWHuOpHZUfodMZwExlTD80N
NNzbhfxEUxkL+GoyaYoWFtkjyNVezIge2qgFW0JU1h8Dgi6zD0YL+VbWqoMJRjf/
IpWgKjYZBlMAaOZLvV9KEb50hPvDZIycBGy1lvzGPlskEYuGPgbBTsLHHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoAsMVQV5u18lAjtZ7TurSVeYtcMB8GA1UdIwQY
MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt
NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj
LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKK5MtRur
krkatlJzTPWFIK0imuzLGCHf6qywlIENBeimSj4lKODRpzFN90sCVuLK4E/jYHcf
7g4NwyMuhbr6R55whfVOJbafRlAVuvv0ROSkLzLO9+LDBgbSkJgWXDSsiE2A2iuL
mPQLnq919bL+KeLHA0NznQNawgvYFLNUR66gu7ViA58OLuAgVpICAXYjjMy90uOr
IccBbU8sXk9XRhrs+E4/mV+LoqID5STX+T8hpkhu1OgLbikmKfNmX32ie/hiSRwH
t00CM1ybM9UvaE9CZNXZDcACP84FUNRnWwY7OtM2UmnePS/d8Pc/hJGbFhO7Pj0L
tb0Sjo0ndfKj6w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:27:56 2026 by rpki-client